VULNERABILITY INTELLIGENCE

CVE-2010-2022

CVSS score3.3 LOW
EPSS probability0.32%
CISA KEVNot currently listed
Published2010-05-28
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:N

Description

jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow local users to read, modify, or create arbitrary files via standard filesystem operations.

Primary references